3681c7ca5ecad1d4929b0c206f994ef9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3681c7ca5ecad1d4929b0c206f994ef9_JaffaCakes118
Size

158KB
MD5

3681c7ca5ecad1d4929b0c206f994ef9
SHA1

17807e7353325eeba2872484a2b5d34db080e7ab
SHA256

1643471047b10520734ea764f6eb567b9fcdaf8ddcc55ed0fbbd8c16ad594536
SHA512

a51ad2678a14a5cd2c4a0b2b4ec1623dd323adf02cd50294e2e89d0098dbe908d27a26b24b4bbb5298f347aab2ab410165b09c073ec5a0f1be22ac812e85a102
SSDEEP

1536:Gy4nQra9pioOfLULY/7uuuci9ISKW4A5vs9OlDUfwIuH6j9sB924LGEfETtb0W85:KwWLCOV0j9s/aokJNqMu3bFSCS30

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3681c7ca5ecad1d4929b0c206f994ef9_JaffaCakes118

Files

3681c7ca5ecad1d4929b0c206f994ef9_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\ccm_wa\e003sa34\ocl-e003sa34#continuous_integration\ocl\Nokia.Omsi\obj\Release\Nokia.Omsi.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ